If a user views a specially crafted web page, an arbitrary script may be executed on the user's web browser. As a result, user information may be disclosed or a user may be directed to an unintended site.